Why this role exists:

We are bringing our cloud infrastructure fully in-house and investing seriously in the platform's foundations: infrastructure as code, modern CI/CD, production resilience, and a structured security and compliance program (ISO/IEC 27001, CERT-In and DPDPA readiness, periodic VAPT). We need a senior, hands-on engineer to own this work end-to-end someone who has designed, built and operated production AWS platforms, not just monitored them. You will be the technical owner of the platform's infrastructure and delivery pipelines, working directly with our technology leadership.

The stack you'll work with:

- AWS across separate development/staging and production accounts
- Amazon ECS for container workloads; AWS Lambda for event-driven functions
- Amazon RDS (MySQL), ElastiCache (Redis), Amazon MSK (Kafka) and Kinesis
- GitHub Actions with OIDC-based (keyless) AWS deployments across ~29 repositories
- Terraform for infrastructure as code
- Laravel (PHP) backend services and three mobile applications (Customer, Driver, Vendor)

What you'll own

Infrastructure ownership & IaC

- Lead the technical transition of AWS infrastructure ownership fully in-house.
- Codify the existing estate in Terraform including brownfield import of click-built resources — and keep DEV and PROD reproducible and drift-free.
- Design and enforce multi-account guardrails: AWS Organizations, SCPs, and IAM Identity Center federated to Microsoft Entra ID (no standalone IAM users).

CI/CD:

- Own and evolve our pipelines end-to-end: build, test and deploy stages, environment promotion, approval gates, and reliable rollback.
- Maintain keyless (OIDC) pipeline-to-AWS authentication — no long-lived credentials anywhere.
- Lead the Bitbucket GitHub organization migration: repositories, pipelines, secrets, branch protections and rulesets, with a phased, low-disruption cutover.




- Embed DevSecOps gates (SAST, container image scanning, secret scanning, dependency updates) into every pipeline.

Reliability & operations:

- Engineer resilience into the platform: Multi-AZ and failover for RDS and ElastiCache, sensible capacity and auto-scaling policies on ECS, and tested backup/restore.
- Own incident response and blameless post-incident reviews with dated, owned follow-through actions.
- Build observability that matters: golden-signal alerting, application error tracking, and OpenTelemetry instrumentation — actionable alerts, not noise.

Security & cost:

- Drive security remediation: secrets rotation, WAF, network segmentation, least-privilege IAM.
- Support the compliance roadmap (ISO/IEC 27001, CERT-In, DPDPA, periodic VAPT) from the infrastructure side.
- Own AWS cost hygiene: right-sizing, commitment planning (Reserved Instances / Savings Plans), storage lifecycle policies and cleanup.

What we're looking for (must-have)

- 5+ years of hands-on DevOps / platform engineering experience, with AWS as your primary cloud for most of that time.
- You have designed, built and owned production AWS infrastructure end-to-end — VPC design, public/private subnetting, load balancing, multi-AZ — and can design and defend such architecture live on a whiteboard.
- Production container experience on AWS — Amazon ECS is strongly preferred; deep EKS/Kubernetes experience is acceptable if you can demonstrate ECS fluency (task definitions, services, ALB target groups,



Fargate vs EC2 launch types, service auto-scaling).
- Strong Terraform: reusable modules, remote state with locking, clean multi-environment structure, plan-in-CI discipline.
- Real CI/CD depth: you have built multi-stage pipelines with environment promotion, approval gates and rollback (Bitbucket Pipelines, GitHub Actions or similar), and you understand OIDC federation for keyless cloud authentication.
- Production operation of relational databases (RDS MySQL/PostgreSQL) and Redis: high availability, backups and point-in-time recovery, failover, and safe low-downtime schema changes.
- Solid Linux, networking (TCP/IP, DNS, TLS) and scripting (Bash and Python).
- Security-first habits: least-privilege IAM, Secrets Manager / SSM Parameter Store, no credentials in code or pipelines.

Nice to have:

- Kafka (Amazon MSK) or Kinesis operations at production scale.
- Brownfield Terraform imports of existing estates.
- AWS multi-account governance (Organizations, SCPs, IAM Identity Center) and Microsoft Entra ID Federation.
- PHP/Laravel deployment and runtime familiarity (PHP-FPM, Composer, queue workers, migration safety).
- Observability tooling: Prometheus/Grafana, Sentry, OpenTelemetry.
- AWS certifications (Solutions Architect Associate/Professional, DevOps Engineer Qualified).
- Experience running high-traffic consumer or real-time platforms.

What we offer:

- End-to-end ownership of a real production platform used daily across Tamil Nadu — your decisions ship and matter.
- A funded modernization mandate: IaC, CI/CD, security and compliance work with leadership backing.
- Direct access to technology leadership and an independent platform audit function — you will not be working in a vacuum.
- Competitive compensation commensurate with experience.

📌 Senior Devops Engineer (Coimbatore)
🏢 Eagle Mobility Solutions Private
📍 Coimbatore